The single maintainer, four open issues, and no security policy leave limited support and transparency. The package is clearly identified, licensed, documented, and has release notes, but its maintenance signals are stale.
58%
Total Score
38
50
83
88
There were zero commits and zero active maintainers in the last three months, consistent with the lack of releases and increasing abandonment risk.
Nine runtime dependencies make this starter kit rely on a substantial dependency chain, while the absence of development dependencies offers little evidence of a maintained test or release workflow.
Only one registry account has publishing access. That is consistent with the repository being user-owned, but it leaves little visible publishing redundancy.
The repository is owned by a user account rather than an organization, and the registry namespace differs from that account; this supports a small personal-project profile with limited institutional backing.
The package has had no release in more than two years and none in the last 12 months, despite five releases overall; this is a meaningful maintenance concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
slim/psr7 Version ^1.6.1 | — | — |
slim/slim Version 4.* | — | — |
vlucas/phpdotenv Version ^5.6 | — | — |
jyoungblood/dbkit Version ^1.2 | — | — |
jyoungblood/cookie Version ^1.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.